Cyber Security Risk Consultant – Up to 75K

About the role

We are seeking a Cyber Security Risk Consultant to join a leading enterprise in Hong Kong. The role focuses on assessing cyber risks, evaluating controls, and guiding remediation across business and technology domains.

Key responsibilities

• Conduct cybersecurity risk assessments and control reviews across business and technology environments.
• Identify security risks, analyse business impact and recommend mitigation strategies.
• Assess effectiveness of existing security controls and pinpoint improvement areas.
• Perform gap assessments against standards, policies and best practices.
• Develop and maintain risk registers, remediation plans and management reporting.
• Partner with business, technology and security teams to gather information and evaluate risk exposure.
• Support security governance, policy and compliance initiatives.
• Facilitate risk discussions with stakeholders and provide guidance on treatment options.
• Monitor remediation progress and ensure risks are managed appropriately.
• Prepare clear and concise reports for stakeholders and senior management.

Required profile

• Bachelor’s degree in Information Security, IT, Computer Science, Engineering or related field.
• 5+ years of experience in cybersecurity, information security, technology risk or security governance.
• Proven experience conducting security risk assessments and control reviews.
• Strong analytical, problem‑solving and communication skills.
• Experience working with cross‑functional teams and managing stakeholder relationships.

Required skills

• Identity and Access Management
• Vulnerability Management
• Network Security
• Cloud Security
• Security Operations
• ISO 27001, NIST, CIS Controls, COBIT frameworks
• CISSP, CISM, CRISC, CISA, CCSP certifications